From 9c25b9b81ba799ef3303a45d31eace06fda6cb11 Mon Sep 17 00:00:00 2001 From: Werner Stein Date: Fri, 6 Nov 2026 07:17:16 +0100 Subject: [PATCH] build(deps): group Dependabot updates and slow the cadence Check weekly on Monday with a 7-day cooldown and at most 3 open PRs. Group minor and patch updates; major updates stay separate. Existing ignore rules are kept. Co-Authored-By: Claude Sonnet 5.5 --- .github/dependabot.yml | 29 ++++++++++++++++++++++++++++- 1 file changed, 28 insertions(+), 1 deletion(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 3bd5ff1..fc2ef23 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -1,9 +1,27 @@ version: 2 updates: - package-ecosystem: npm - directory: / + directories: + - / + - /tools/gentype-canary schedule: interval: weekly + day: monday + open-pull-requests-limit: 3 + cooldown: + default-days: 7 + commit-message: + prefix: build(deps) + prefix-development: build(deps-dev) + groups: + commitlint: + patterns: ['@commitlint/*'] + dev-dependencies: + dependency-type: development + update-types: [minor, patch] + production-dependencies: + dependency-type: production + update-types: [minor, patch] ignore: # Git dependencies are deliberately pinned to reviewed revisions. - dependency-name: smartcube-web-bluetooth @@ -26,3 +44,12 @@ updates: directory: / schedule: interval: weekly + day: monday + open-pull-requests-limit: 3 + cooldown: + default-days: 7 + commit-message: + prefix: build(deps) + groups: + github-actions: + patterns: ['*']